0

I am currently doing packet capture through mirroring with Wireshark as mentioned in this post

I can mirror the traffic to a port physically jacked into and analyze the packets redirected there w/ Wireshark. How can I, if possible, transport that traffic to a laptop or a remote device?

Improve this question

1 Answer 1

Reset to default
1

What you're looking for is called RSPAN - Remote Switch Port ANalyzer. RSPAN copies frames from a monitored port into a (dedicated) VLAN which you connect to the monitoring station.

  1. Set up a VLAN between the monitored switch and the monitoring station.
  2. Configure RSPAN from the monitored port into the RSPAN VLAN.

I found a detailed description for Brocade here.

Improve this answer
1
  • 1
    I do not know about Brocade, but Cisco also has ERSPAN that will actually route the traffic to a remote site, so you do not need a VLAN to span sites.
    – Ron Maupin ♦
    Oct 9, 2020 at 14:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.